Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e20383334.roa
File: 3139342e3139352e39352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jOazV8tH15y6PKW1IMSl94HVSFeg5aL6D/u1puy2xIw=
Subject key identifier: 11:80:7C:26:21:94:17:AE:AF:70:62:0F:BC:25:2E:FE:B6:35:42:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D9C407BA6A28662388062AA50364B3A789693E8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e20383334.roa
Signing time: Tue 25 Jun 2024 07:32:43 +0000
ROA not before: Tue 25 Jun 2024 07:27:43 +0000
ROA not after: Tue 24 Jun 2025 07:32:43 +0000
asID: 834
IP address blocks: 194.195.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 22:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9c:40:7b:a6:a2:86:62:38:80:62:aa:50:36:4b:3a:78:96:93:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 25 07:27:43 2024 GMT
Not After : Jun 24 07:32:43 2025 GMT
Subject: CN=11807C26219417AEAF70620FBC252EFEB6354221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:34:1a:04:19:59:c0:53:52:a7:01:1e:2a:
bb:9c:81:23:d8:be:4d:24:4c:e0:19:e2:ca:9c:8f:
43:04:87:9d:58:e3:f0:70:e0:0b:51:cf:68:80:9e:
69:15:85:96:cc:ca:65:b1:2d:28:d0:7c:21:b6:7b:
b3:3b:91:8d:b9:08:9d:a3:99:df:9d:57:23:f7:ce:
20:de:e6:72:3f:ea:2c:84:bb:44:4e:5c:dc:98:4a:
34:2d:4a:0d:de:3e:45:bb:73:63:8d:e2:72:06:2e:
7a:ae:1f:47:ad:3b:4a:b6:f0:ba:8c:01:f0:40:86:
4b:e2:82:ba:d4:53:be:3d:be:5c:52:c5:3b:bd:97:
e5:02:ee:63:00:9c:5b:37:15:c6:1c:74:2a:22:93:
93:c3:22:ec:01:c7:84:ac:54:07:22:7b:fd:da:70:
66:c7:8e:34:e0:87:69:d1:c8:cb:eb:ce:71:5d:34:
e3:58:20:3e:09:90:89:ea:e8:e4:e9:00:92:2b:e6:
26:34:dd:3b:23:33:97:d0:96:b1:50:88:8d:e1:d3:
f8:d8:8f:6e:d4:76:51:8e:41:69:66:66:8c:26:f3:
3f:5a:97:60:ad:35:96:be:81:6f:30:f6:1e:77:40:
48:11:d2:c2:d7:2a:a9:d8:b7:fe:39:2c:29:ec:5d:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:7C:26:21:94:17:AE:AF:70:62:0F:BC:25:2E:FE:B6:35:42:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
42:96:e1:f0:5c:71:7a:e6:e3:ac:71:68:93:6d:c2:42:c7:57:
b9:7a:15:9e:b6:e8:ec:f4:3c:73:32:fa:c2:ab:c3:60:04:ec:
35:62:69:b6:18:d1:81:13:2e:3e:49:1c:7b:be:bb:7a:59:1a:
28:9c:66:a5:8b:36:96:80:de:f1:dd:37:79:13:79:a6:98:9f:
6f:99:67:6f:ff:e7:50:1e:c3:35:ac:6c:2f:51:db:4f:eb:86:
d7:8e:31:22:dc:dd:20:c6:84:8f:89:26:32:64:85:64:76:80:
30:e0:07:08:45:be:62:41:57:d3:22:63:ad:aa:64:00:5f:10:
13:42:74:5e:d6:89:76:d2:38:31:2c:9b:a3:32:cb:a1:47:f9:
e9:23:47:a0:13:d8:68:82:12:55:3c:8f:49:e9:8c:3d:b2:1a:
a2:5a:c0:65:5b:17:84:31:2b:1f:95:8c:18:70:15:73:b6:62:
94:40:91:d7:8e:85:38:d2:9f:73:a1:30:61:0d:e5:1e:28:f5:
0d:b2:4a:9e:46:ea:c6:81:2a:26:f6:bb:a5:dc:af:10:8e:7d:
ae:f3:6a:21:07:15:aa:d0:92:2d:39:8e:10:db:02:a8:33:d8:
b4:2d:17:76:f8:5e:e9:b7:b7:12:e5:c5:e6:0d:da:7a:df:22:
72:05:97:bc
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 17 00:29:55 2024 by rpki-client on console-ams.rpki-client.org